VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291348 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2023-28410 | redhat_vex | hw: Intel: Improper restriction in memory buffer in graphics drivers cause escalation of privilege | fixed: 166 known affected: 98 known not affected: 14 | 2026-08-06T20:36:08+00:00 | Vulnerability · Source |
| CVE-2022-21216 | redhat_vex | kernel: Intel firmware update for insufficient granularity of access control in out-of-band management in some Intel Atom and Intel Xeon Scalable Processors | fixed: 15 known affected: 2 known not affected: 4 | 2026-08-06T20:35:33+00:00 | Vulnerability · Source |
| CVE-2023-26464 | redhat_vex | log4j1-socketappender: DoS via hashmap logging | fixed: 441 known affected: 26 known not affected: 39 | 2026-08-06T20:34:11+00:00 | Vulnerability · Source |
| CVE-2023-1387 | redhat_vex | grafana: JWT token leak to data source | fixed: 6 known affected: 26 known not affected: 28 | 2026-08-06T20:30:45+00:00 | Vulnerability · Source |
| CVE-2022-33196 | redhat_vex | kernel: Intel firmware update for Incorrect default permissions in some memory controller configurations | fixed: 15 known affected: 2 known not affected: 4 | 2026-08-06T20:30:01+00:00 | Vulnerability · Source |
| CVE-2023-1370 | redhat_vex | json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion) | fixed: 20 known affected: 14 known not affected: 32 | 2026-08-06T20:29:06+00:00 | Vulnerability · Source |
| CVE-2023-2183 | redhat_vex | grafana: missing access control allows test alerts by underprivileged user | fixed: 160 known affected: 12 known not affected: 31 | 2026-08-06T20:27:49+00:00 | Vulnerability · Source |
| CVE-2023-2801 | redhat_vex | grafana: data source proxy race condition | fixed: 160 known affected: 12 known not affected: 31 | 2026-08-06T20:27:46+00:00 | Vulnerability · Source |
| CVE-2023-1998 | redhat_vex | kernel: Spectre v2 SMT mitigations problem | fixed: 830 known affected: 42 | 2026-08-06T20:27:41+00:00 | Vulnerability · Source |
| CVE-2023-2727 | redhat_vex | kube-apiserver: Bypassing policies imposed by the ImagePolicyWebhook admission plugin | fixed: 1035 known affected: 14 known not affected: 1 | 2026-08-06T20:27:02+00:00 | Vulnerability · Source |
| CVE-2023-2728 | redhat_vex | kube-apiserver: Bypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin | fixed: 1035 known affected: 14 known not affected: 1 | 2026-08-06T20:26:58+00:00 | Vulnerability · Source |
| CVE-2023-25809 | redhat_vex | runc: Rootless runc makes `/sys/fs/cgroup` writable | fixed: 542 known affected: 30 known not affected: 622 | 2026-08-06T20:26:29+00:00 | Vulnerability · Source |
| CVE-2023-3108 | redhat_vex | kernel: A race condition in crypto module in the function skcipher_recvmsg | known affected: 28 known not affected: 170 | 2026-08-06T20:26:10+00:00 | Vulnerability · Source |
| CVE-2023-3567 | redhat_vex | kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race | fixed: 1108 known affected: 50 known not affected: 15 | 2026-08-06T20:26:05+00:00 | Vulnerability · Source |
| CVE-2023-3772 | redhat_vex | kernel: xfrm: NULL pointer dereference in xfrm_update_ae_params() | fixed: 666 known affected: 64 | 2026-08-06T20:26:04+00:00 | Vulnerability · Source |
| CVE-2023-33951 | redhat_vex | kernel: vmwgfx: race condition leading to information disclosure vulnerability | fixed: 771 known affected: 22 known not affected: 43 | 2026-08-06T20:25:54+00:00 | Vulnerability · Source |
| CVE-2023-2911 | redhat_vex | bind: Exceeding the recursive-clients quota may cause named to terminate unexpectedly when stale-answer-client-timeout is set to 0 | known not affected: 68 | 2026-08-06T20:25:52+00:00 | Vulnerability · Source |
| CVE-2023-3773 | redhat_vex | kernel: xfrm: out-of-bounds read of XFRMA_MTIMER_THRESH nlattr | fixed: 267 known affected: 22 known not affected: 90 | 2026-08-06T20:25:44+00:00 | Vulnerability · Source |
| CVE-2024-0874 | redhat_vex | coredns: CD bit response is cached and served later | fixed: 16 known affected: 1 known not affected: 2034 | 2026-08-06T20:25:37+00:00 | Vulnerability · Source |
| CVE-2023-4132 | redhat_vex | kernel: smsusb: use-after-free caused by do_submit_urb() | fixed: 399 known affected: 42 known not affected: 108 | 2026-08-06T20:25:04+00:00 | Vulnerability · Source |
| CVE-2023-1260 | redhat_vex | kube-apiserver: PrivEsc | fixed: 39 known not affected: 511 | 2026-08-06T20:24:51+00:00 | Vulnerability · Source |
| CVE-2023-0461 | redhat_vex | kernel: net/ulp: use-after-free in listening ULP sockets | fixed: 1218 known not affected: 46 | 2026-08-06T20:24:43+00:00 | Vulnerability · Source |
| CVE-2023-39192 | redhat_vex | kernel: netfilter: xtables out-of-bounds read in u32_match_it() | fixed: 150 known affected: 42 known not affected: 108 | 2026-08-06T20:22:19+00:00 | Vulnerability · Source |
| CVE-2023-42755 | redhat_vex | kernel: rsvp: out-of-bounds read in rsvp_classify() | fixed: 150 known affected: 42 known not affected: 108 | 2026-08-06T20:22:12+00:00 | Vulnerability · Source |
| CVE-2023-4133 | redhat_vex | kernel: cxgb4: use-after-free in ch_flower_stats_cb() | fixed: 429 known affected: 64 | 2026-08-06T20:22:05+00:00 | Vulnerability · Source |
| CVE-2022-25243 | redhat_vex | vault: PKI Secrets Engine Policy Results In Incorrect Wildcard Certificate Issuance | known affected: 6 known not affected: 5 | 2026-08-06T20:22:04+00:00 | Vulnerability · Source |
| CVE-2023-32261 | redhat_vex | jenkins-2-plugins: dimensionsscm: Missing permission check in Dimensions Plugin allows enumerating credentials IDs | known affected: 5 known not affected: 2 | 2026-08-06T20:21:56+00:00 | Vulnerability · Source |
| CVE-2023-25775 | redhat_vex | kernel: irdma: Improper access control | fixed: 614 known affected: 22 | 2026-08-06T20:21:51+00:00 | Vulnerability · Source |
| CVE-2023-3153 | redhat_vex | ovn: service monitor MAC flow is not rate limited | fixed: 82 known affected: 78 known not affected: 1966 | 2026-08-06T20:21:37+00:00 | Vulnerability · Source |
| CVE-2023-4155 | redhat_vex | kernel: KVM: SEV-ES / SEV-SNP VMGEXIT double fetch vulnerability | fixed: 683 known affected: 22 known not affected: 42 | 2026-08-06T20:21:33+00:00 | Vulnerability · Source |
| CVE-2023-32732 | redhat_vex | gRPC: denial of service | known affected: 6 | 2026-08-06T20:21:32+00:00 | Vulnerability · Source |
| CVE-2023-2235 | redhat_vex | kernel: use-after-free vulnerability in the perf_group_detach function of the Linux Kernel Performance Events | fixed: 716 known not affected: 43 | 2026-08-06T20:20:34+00:00 | Vulnerability · Source |
| CVE-2023-3089 | redhat_vex | openshift: OCP & FIPS mode | fixed: 4022 known affected: 1 known not affected: 2176 | 2026-08-06T20:20:04+00:00 | Vulnerability · Source |
| CVE-2023-32262 | redhat_vex | jenkins-2-plugins: dimensionsscm: Exposure of system-scoped credentials in Dimensions Plugin | known affected: 5 known not affected: 2 | 2026-08-06T20:17:52+00:00 | Vulnerability · Source |
| CVE-2023-4459 | redhat_vex | kernel: vmxnet3: NULL pointer dereference in vmxnet3_rq_cleanup() | fixed: 579 known affected: 198 | 2026-08-06T20:17:46+00:00 | Vulnerability · Source |
| CVE-2023-4385 | redhat_vex | kernel: jfs: NULL pointer dereference in dbFree() | known affected: 14 known not affected: 184 | 2026-08-06T20:17:42+00:00 | Vulnerability · Source |
| CVE-2023-39197 | redhat_vex | kernel: DCCP: conntrack out-of-bounds read in nf_conntrack_dccp_packet() | known affected: 42 known not affected: 156 | 2026-08-06T20:17:41+00:00 | Vulnerability · Source |
| CVE-2023-4389 | redhat_vex | kernel: btrfs: double free in btrfs_get_root_ref() | known not affected: 198 | 2026-08-06T20:17:38+00:00 | Vulnerability · Source |
| CVE-2023-4512 | redhat_vex | wireshark: DoS (crash) via packet injection or crafted capture file | known affected: 16 known not affected: 1 | 2026-08-06T20:17:24+00:00 | Vulnerability · Source |
| CVE-2023-4387 | redhat_vex | kernel: vmxnet3: use-after-free in vmxnet3_rq_alloc_rx_buf() | fixed: 286 known affected: 80 | 2026-08-06T20:17:18+00:00 | Vulnerability · Source |
| CVE-2023-4394 | redhat_vex | kernel: btrfs: memory leak in btrfs_get_dev_args_from_path() | known not affected: 198 | 2026-08-06T20:17:15+00:00 | Vulnerability · Source |
| CVE-2023-33952 | redhat_vex | kernel: vmwgfx: double free within the handling of vmw_buffer_object objects | fixed: 771 known affected: 22 known not affected: 43 | 2026-08-06T20:17:12+00:00 | Vulnerability · Source |
| CVE-2023-3389 | redhat_vex | kernel: Racing a io_uring cancel poll request with a linked timeout can cause a UAF in a hrtimer | known not affected: 198 | 2026-08-06T20:17:11+00:00 | Vulnerability · Source |
| CVE-2023-39198 | redhat_vex | kernel: QXL: race condition leading to use-after-free in qxl_mode_dumb_create() | fixed: 429 known affected: 64 | 2026-08-06T20:17:03+00:00 | Vulnerability · Source |
| CVE-2023-4513 | redhat_vex | wireshark: DoS (memory leak) via packet injection or crafted capture file | known affected: 16 known not affected: 1 | 2026-08-06T20:17:00+00:00 | Vulnerability · Source |
| CVE-2023-4511 | redhat_vex | wireshark: DoS (infinite loop) via packet injection or crafted capture file | known affected: 16 known not affected: 1 | 2026-08-06T20:16:58+00:00 | Vulnerability · Source |
| CVE-2023-39193 | redhat_vex | kernel: netfilter: xtables sctp out-of-bounds read in match_flags() | fixed: 429 known affected: 64 | 2026-08-06T20:16:52+00:00 | Vulnerability · Source |
| CVE-2024-1312 | redhat_vex | kernel: Race condition leads to use after free during VMA lock in lock_vma_under_rcu | known not affected: 198 | 2026-08-06T20:16:26+00:00 | Vulnerability · Source |
| CVE-2026-58459 | redhat_vex | gpsd: gpsd: Command Injection via GPS device subtype allows arbitrary code execution | fixed: 50 | 2026-08-06T20:11:44+00:00 | Vulnerability · Source |
| CVE-2023-37264 | redhat_vex | tektoncd: pipelines do not validate child UIDs | known not affected: 23 | 2026-08-06T20:10:14+00:00 | Vulnerability · Source |